Data Breach Confirmed After Australian Energy Giant Origin Is Hacked
Origin Energy confirms data breach after hacker claims to have stolen 2 million customer records.
Australian energy giant Origin Energy has confirmed a data breach affecting customer information. A hacker claims to have stolen data from approximately 2 million customers and is threatening to leak it unless a ransom is paid. The company is investigating and contacting affected individuals, while also notifying law enforcement and privacy agencies.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Origin Energy?
Get an email when a new story names Origin Energy, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonA hacker gained unauthorized access to Origin Energy's systems and exfiltrated data belonging to approximately 2 million customers, then leveraged that data as a ransom threat. This incident highlights the critical importance of protecting customer data at rest and in transit, as well as having robust controls to detect and stop exfiltration in progress. The breach also underscores how critical infrastructure operators are high-value targets for financially motivated threat actors. Failing to protect sensitive customer data not only exposes individuals to identity theft and fraud, but also triggers mandatory regulatory notifications and significant reputational damage for the organization.
What helps against this
How we list vendors- Encryption and key management
Stolen data stays unreadable, and the keys stay under your control.
- Incident response retainer
Experts are on call before the worst day, not searched for during it.
- Third-party risk management (TPRM)
You know which suppliers could hurt you, and you hear quickly when one of them is breached.